Solved

Win 2000 DNS issue-Cant Log ON?

Posted on 2004-09-03
4
327 Views
Last Modified: 2010-04-14
I have 2003 server running active directory...Today I had to change my firewalls WAN ip...Now None of the Windows 2000 clients ON THE LAN can login?!?!?!  

It accepts the login a password but just says 'Applying System Settings" for hours.

As soon as I login and Change their primary DNS Server to the ip address of my 2003 server that is running dns (as a backup just in case something like this happened) and reboot they can login just fine.

I've been running this setup using outside ISP DNS servers as both primary and secondary for months...why now cant my 2000 users login yet XP Pro clients have no problem.

Thanks for any info
0
Comment
Question by:Matrix1000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 400 total points
ID: 11978104
I have no idea why it worked before, and why it's still working for your XP clients, but that it doesn't work at the moment for your W2k machines is the expected behaviour of AD clients which point to the wrong DNS.
For AD to work, you need Dynamic DNS registration, and I doubt that you have that with your ISP's DNS server.
The recommended setup: Let all your domain members (inlcuding the DC, which, I assume, is running DNS) point to your internal DNS *only* (and let the DC point to its IP address, NOT to 127.0.0.1). Delete the root zone (".") in your DNS forward lookup zones if present, and configure forwarders on your DNS to point to your ISP's DNS.
In addition, make sure dynamic updates are enabled on your DNS server.

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382

Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003
http://support.microsoft.com/?kbid=825036

How to Verify the Creation of SRV Records for a Domain Controller
http://support.microsoft.com/?kbid=241515

How Domain Controllers Are Located in Windows
http://support.microsoft.com/?kbid=247811

How Domain Controllers Are Located in Windows XP
http://support.microsoft.com/?kbid=314861

HOW TO: Configure DNS for Internet Access in Windows Server 2003
http://support.microsoft.com/?kbid=323380

HOW TO: Troubleshoot DNS Name Resolution on the Internet in Windows Server 2003
http://support.microsoft.com/?kbid=816567
0
 
LVL 9

Expert Comment

by:MSGeek
ID: 11978166
If I understand correctly your primaruy DNS is being hosted by your ISP??? In other words you have no DNS serves you host for internal resolution that are in your control?? Is that an accurate statement?  MSGeek
0
 
LVL 4

Assisted Solution

by:jonnietexas
jonnietexas earned 50 total points
ID: 11978314
Yeah, you need internal DNS for your network.  It is possible with the change to the external interface that it can now connect to nothing if it can't find it.  I would say create an internal DNS and dhcp, using forwarding for DNS requests and drop DNS server addresses to the clients as a dhcp option.
0
 
LVL 8

Assisted Solution

by:f_umar
f_umar earned 50 total points
ID: 11978996
you can also use forwarders for your dns, it would ask specified dns server for the addresses which it cant resolve itself. configure your clients pointing to internal dns and configure your isp dns as forwarders right click your server in dns mmc then properties then forwarders.

see this link
http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/sag_DNS_imp_UsingForwarders.htm

0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to change folder redirection to a new server 5 753
Outlook 2013 Certicate error 1 307
Can’t delete a file 14 234
OLD CPUs 12 132
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
By reading this blog, MSPs will gain insight into how to improve communications with their clients as well as establish a more profitable business.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question